Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-86950 |
high | 8.8 | 0.2617 | 2026-09-28 | Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may l | KEV |
CVE-2026-62817 |
high | 8.8 | 0.0053 | 2026-08-11 | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent | |
CVE-2026-70007 |
high | 8.8 | 0.0080 | 2026-10-13 | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network | |
CVE-2026-96235 |
high | 8.8 | 0.0086 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | |
CVE-2026-97762 |
high | 8.8 | 0.0086 | 2026-10-13 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a | |
CVE-2026-83929 |
high | 8.8 | 0.0059 | 2026-10-13 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-88165 |
high | 8.8 | 0.0085 | 2026-10-13 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute cod | |
CVE-2026-96224 |
high | 8.8 | 0.0076 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | |
CVE-2023-22640 |
high | 8.8 | 0.0089 | 2023-05-03 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7 | |
CVE-2023-23605 |
high | 8.8 | 0.0070 | 2023-06-02 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 a | |
CVE-2023-25732 |
high | 8.8 | 0.0074 | 2023-06-02 | When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input bein | |
CVE-2023-25744 |
high | 8.8 | 0.0067 | 2023-06-02 | Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence | |
CVE-2023-25746 |
high | 8.8 | 0.0067 | 2023-06-02 | Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corrup | |
CVE-2023-28176 |
high | 8.8 | 0.0072 | 2023-06-02 | Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence | |
CVE-2023-37211 |
high | 8.8 | 0.0075 | 2023-07-05 | Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these | |
CVE-2025-11714 |
high | 8.8 | 0.0034 | 2025-10-14 | Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox | |
CVE-2026-6305 |
high | 8.8 | 0.0034 | 2026-04-15 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-3298 |
high | 8.8 | 0.0039 | 2026-04-21 | The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a bounda | |
CVE-2026-7899 |
high | 8.8 | 0.0030 | 2026-05-06 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-7902 |
high | 8.8 | 0.0034 | 2026-05-06 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-7951 |
high | 8.8 | 0.0038 | 2026-05-06 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to e | |
CVE-2026-7957 |
high | 8.8 | 0.0029 | 2026-05-06 | Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote at | |
CVE-2026-43908 |
high | 8.8 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-43909 |
high | 8.8 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-8524 |
high | 8.8 | 0.0038 | 2026-05-14 | Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker t | |
CVE-2026-8526 |
high | 8.8 | 0.0038 | 2026-05-14 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to | |
CVE-2026-8558 |
high | 8.8 | 0.0031 | 2026-05-14 | Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to e | |
CVE-2026-44988 |
high | 8.8 | 0.0024 | 2026-05-27 | LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClie | |
CVE-2026-8915 |
high | 8.8 | 0.0034 | 2026-05-28 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This iss | |
CVE-2026-34195 |
high | 8.8 | 0.0033 | 2026-06-12 | Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API ca | |
CVE-2026-0146 |
high | 8.8 | 0.0028 | 2026-06-16 | In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write | |
CVE-2026-0147 |
high | 8.8 | 0.0028 | 2026-06-16 | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds | |
CVE-2026-0148 |
high | 8.8 | 0.0028 | 2026-06-16 | In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due | |
CVE-2026-0149 |
high | 8.8 | 0.0029 | 2026-06-16 | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This | |
CVE-2026-0151 |
high | 8.8 | 0.0023 | 2026-06-16 | In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflo | |
CVE-2026-0161 |
high | 8.8 | 0.0023 | 2026-06-16 | In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer | |
CVE-2026-0164 |
high | 8.8 | 0.0023 | 2026-06-16 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to | |
CVE-2026-13033 |
high | 8.8 | 0.0038 | 2026-06-24 | Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe | |
CVE-2026-14087 |
high | 8.8 | 0.0037 | 2026-06-30 | Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14385 |
high | 8.8 | 0.0033 | 2026-07-01 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14395 |
high | 8.8 | 0.0041 | 2026-07-01 | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execu | |
CVE-2026-14422 |
high | 8.8 | 0.0037 | 2026-07-01 | Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-15114 |
high | 8.8 | 0.0032 | 2026-07-08 | Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote att | |
CVE-2026-10673 |
high | 8.8 | 0.0042 | 2026-07-15 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reasse | |
CVE-2026-15903 |
high | 8.8 | 0.0041 | 2026-07-20 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacke | |
CVE-2026-16807 |
high | 8.8 | 0.0034 | 2026-07-23 | Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to | |
CVE-2026-45813 |
high | 8.8 | 0.0053 | 2026-07-24 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS serv | |
CVE-2026-19162 |
high | 8.8 | 0.0041 | 2026-08-06 | Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to exec | |
CVE-2026-70456 |
high | 8.8 | 0.0040 | 2026-08-13 | rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function t | |
CVE-2026-70458 |
high | 8.8 | 0.0040 | 2026-08-13 | rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corr |